Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: sjYf3plhFg2ifoxlqxEh3yj79RP1pV8GGCQ181Hg6XY=
Subject key identifier: 8E:AA:02:EC:7D:C3:4B:82:E9:B2:1E:09:72:B1:61:D0:06:1D:CC:88
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 01A0CCDA3AB53C36893184B7C7EB80925273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 1139
Signing time: Wed 23 Sep 2026 06:00:48 +0000
Manifest this update: Wed 23 Sep 2026 06:00:48 +0000
Manifest next update: Thu 24 Sep 2026 06:00:48 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: NL/OtSGezbZR1mhOLIEFKgbpOMhSWQEsoeidRiQYe8Y=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:3a:b5:3c:36:89:31:84:b7:c7:eb:80:92:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Sep 23 06:00:48 2026 GMT
Not After : Sep 24 06:00:48 2026 GMT
Subject: CN=8eaa02ec7dc34b82e9b21e0972b161d0061dcc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:df:ab:c7:80:1d:53:0b:71:91:0e:ee:83:
01:6a:2b:56:d9:90:98:1f:0c:b8:81:b4:be:77:dc:
41:d4:ae:6a:a9:7d:a3:17:cf:15:e1:1d:5f:34:4f:
52:72:58:de:d3:01:0f:00:bc:ae:f5:67:2d:45:e2:
dd:98:d7:ec:8b:7f:3b:14:93:7a:ee:dd:c4:bd:d9:
d1:57:a6:b3:72:df:ef:81:c2:da:42:22:c3:86:5d:
d4:56:ba:52:e5:65:17:b0:e2:c7:4f:83:44:2c:f0:
0d:17:25:88:0b:07:3b:27:65:ef:de:25:14:76:28:
24:1f:46:a3:75:75:8a:57:a9:a3:3a:d8:8d:f6:bb:
d4:52:ec:d2:c0:b1:8f:10:9f:bf:03:47:37:fd:b0:
3d:62:1f:f6:fc:d3:ec:ac:3f:36:68:b7:74:9c:2e:
32:08:68:d0:81:91:05:0e:de:b1:4f:84:1c:8d:aa:
ea:96:f8:52:4d:be:c5:6c:3d:c5:a0:69:36:48:b4:
46:fe:b1:9c:9a:c0:67:cc:18:19:f0:5e:69:65:fb:
9a:40:6c:27:9a:73:86:3f:53:69:be:16:e2:dc:dd:
43:bb:96:8e:04:65:57:64:12:9d:47:12:34:ab:79:
5b:6e:44:f1:00:db:b7:b0:d0:c7:a0:90:f9:af:a3:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:02:EC:7D:C3:4B:82:E9:B2:1E:09:72:B1:61:D0:06:1D:CC:88
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:59:71:80:a6:8d:e4:9f:89:39:db:54:a8:98:7e:67:65:9d:
da:30:3d:27:df:3e:af:cc:2b:03:e0:ed:8e:57:dd:fe:73:da:
71:e1:d8:fd:63:28:5a:62:a2:c3:43:28:10:3f:05:93:d2:6a:
19:99:1c:da:3b:1d:e5:ca:b7:1f:45:00:7f:28:a9:df:30:8e:
6d:45:2c:a8:ee:7d:3f:f0:04:1f:9b:45:67:b4:fa:8b:4d:3a:
fe:13:e1:e9:e6:90:8c:f6:58:58:b2:ca:20:1b:6b:22:f3:9d:
fb:0a:c5:61:26:6a:70:3d:1e:49:5d:c8:ab:d3:e0:44:19:d6:
a2:3a:e7:89:72:77:43:c2:67:16:3c:1c:2f:7e:84:30:30:ce:
a8:83:33:6d:da:97:5b:b9:6b:24:0b:f9:90:11:d2:5f:38:56:
48:77:68:86:40:c9:d0:8f:32:52:9b:33:6d:12:28:8b:c6:2e:
2e:a9:4c:b9:b6:86:cb:43:b3:2b:93:d2:18:60:7b:69:19:72:
f5:d2:1c:7a:4e:2b:07:ed:d8:85:82:92:2c:68:fe:22:5d:6a:
8e:8b:a4:2e:39:e6:5a:1a:be:6a:68:66:52:80:9f:e1:66:21:
45:27:28:38:f8:94:0a:6c:1b:01:5c:76:33:cf:7a:eb:81:58:
5e:44:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:02 2026 by rpki-client